Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/1d5204de-1406-354f-9736-af354e72eebf.roa
File:                     1d5204de-1406-354f-9736-af354e72eebf.roa (raw, json)
Hash identifier:          A+WpHDkkmjV8ZlsURTyRIkgqbOE07L47PW0FkJfwKJI=
Subject key identifier:   85:CC:98:66:ED:E5:8C:6D:67:06:E3:1E:63:DF:8A:DC:1D:26:AF:93
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584BBE4061BD9A2F07FBBA7CC700
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/1d5204de-1406-354f-9736-af354e72eebf.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     400072
IP address blocks:        74.122.56.0/21 maxlen: 24
                          107.180.128.0/21 maxlen: 24
                          107.180.148.0/22 maxlen: 24
                          107.180.160.0/19 maxlen: 24
                          206.251.196.0/22 maxlen: 24
                          206.251.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:61:bd:9a:2f:07:fb:ba:7c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=da1c581a-7222-4d2b-a4ac-2a83f8aa0c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e5:e8:70:61:d8:7e:c0:48:58:71:bb:38:ce:
                    f3:7b:6d:3d:70:4f:1a:41:7a:8f:34:99:4f:a5:d9:
                    80:4c:f6:e5:4a:b2:36:59:2e:c7:fd:4d:80:db:03:
                    61:85:f9:00:d8:e1:bf:bb:6c:3f:cc:89:8b:5f:94:
                    03:20:bf:ce:1f:62:78:70:3e:1a:8a:f2:43:b5:2f:
                    b4:a9:30:67:3c:24:fd:32:00:1e:87:ac:5c:09:bc:
                    13:72:ad:ea:ee:bb:20:64:dc:5d:c2:0e:3f:bc:75:
                    00:f5:79:d2:6b:71:c0:6b:19:01:6c:65:71:91:ec:
                    9d:66:5d:cc:aa:df:2f:0e:cd:af:14:cd:01:a0:16:
                    c2:6e:67:7f:2b:55:b9:20:5c:90:05:86:dc:d1:ff:
                    0d:77:13:46:a9:b6:e7:c3:35:85:bb:e3:3c:67:cd:
                    07:fa:d3:2f:c3:41:06:b6:3d:d3:90:b0:67:23:94:
                    97:5b:bf:44:fc:4f:23:e5:2d:b3:ae:29:2e:b8:eb:
                    b9:07:0f:6f:a3:04:8d:77:c3:d5:00:c9:66:e0:f0:
                    10:c4:d8:5e:ad:83:0e:b9:1a:7e:61:db:ce:09:6a:
                    6f:b9:fd:f1:2a:97:44:4b:33:bf:5f:23:a0:82:5d:
                    44:b3:55:4e:da:7d:91:76:58:5b:97:8b:94:8b:68:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CC:98:66:ED:E5:8C:6D:67:06:E3:1E:63:DF:8A:DC:1D:26:AF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/1d5204de-1406-354f-9736-af354e72eebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.56.0/21
                  107.180.128.0/21
                  107.180.148.0/22
                  107.180.160.0/19
                  206.251.196.0-206.251.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:bf:8d:ff:6c:4d:90:9d:c4:3b:fb:74:99:11:ad:f8:da:
         2e:82:4b:e0:6d:3a:1d:39:56:dc:e7:23:a9:32:87:39:8f:70:
         2c:35:0e:c9:a6:7f:1b:d2:1c:3f:49:22:77:4a:02:93:57:59:
         c2:a2:d4:bd:44:b3:d9:cd:09:6c:00:e7:a1:63:9e:5a:13:04:
         ea:92:c0:85:15:40:54:3a:97:97:84:f8:87:f4:0f:26:48:d9:
         5e:be:e5:44:41:c7:9a:fc:8e:64:8f:0d:a0:03:1a:74:1e:eb:
         87:89:15:70:f3:18:1d:1d:f0:5d:85:53:a0:4e:40:63:e0:db:
         5a:49:51:26:62:ff:59:03:1b:aa:29:c1:bf:d3:28:c0:a2:6a:
         a5:62:cf:5a:3b:11:1a:39:0d:a2:b4:fd:b0:58:fd:09:a4:cb:
         b8:e9:b6:68:79:d5:d5:30:34:5e:43:ff:38:61:76:c7:8a:fb:
         2f:d2:e4:d9:2e:03:86:2e:61:dd:7b:ea:7a:de:2b:c0:64:51:
         bb:eb:c9:a6:b7:17:91:f0:c1:3c:d7:5c:a8:59:99:3a:fe:64:
         ef:5b:22:05:bc:c8:ca:68:3c:7b:b8:0f:d3:a0:c1:0e:9b:17:
         a9:51:c5:55:0a:58:de:37:92:e2:06:5e:01:cd:dd:6b:f2:aa:
         cb:5c:40:59
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEu+QGG9mi8H+7p8xwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZGExYzU4MWEtNzIyMi00ZDJiLWE0YWMtMmE4M2Y4YWEwYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++XocGHYfsBIWHG7OM7ze209cE8aQXqPNJlP
pdmATPblSrI2WS7H/U2A2wNhhfkA2OG/u2w/zImLX5QDIL/OH2J4cD4aivJDtS+0
qTBnPCT9MgAeh6xcCbwTcq3q7rsgZNxdwg4/vHUA9XnSa3HAaxkBbGVxkeydZl3M
qt8vDs2vFM0BoBbCbmd/K1W5IFyQBYbc0f8NdxNGqbbnwzWFu+M8Z80H+tMvw0EG
tj3TkLBnI5SXW79E/E8j5S2zrikuuOu5Bw9vowSNd8PVAMlm4PAQxNherYMOuRp+
YdvOCWpvuf3xKpdESzO/XyOggl1Es1VO2n2Rdlhbl4uUi2jtpwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFIXMmGbt5YxtZwbjHmPfitwdJq+TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMWQ1MjA0ZGUtMTQwNi0z
NTRmLTk3MzYtYWYzNTRlNzJlZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDSno4AwQD
a7SAAwQCa7SUAwQFa7SgMAwDBALO+8QDBALO+8gwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUMO/jf9sTZCd
xDv7dJkRrfjaLoJL4G06HTlW3OcjqTKHOY9wLDUOyaZ/G9IcP0kid0oCk1dZwqLU
vUSz2c0JbADnoWOeWhME6pLAhRVAVDqXl4T4h/QPJkjZXr7lREHHmvyOZI8NoAMa
dB7rh4kVcPMYHR3wXYVToE5AY+DbWklRJmL/WQMbqinBv9MowKJqpWLPWjsRGjkN
orT9sFj9CaTLuOm2aHnV1TA0XkP/OGF2x4r7L9Lk2S4Dhi5h3Xvqet4rwGRRu+vJ
prcXkfDBPNdcqFmZOv5k71siBbzIymg8e7gP06DBDpsXqVHFVQpY3jeS4gZeAc3d
a/Kqy1xAWQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:31 2025 by rpki-client